Advisories · Technology

IBM Sterling B2B Integrator.

Every CVE that names IBM Sterling B2B Integrator among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-19273 CVE record

CVSS 5.4 Medium

The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Authentication bypass
Not analysed yet 14 Sept 2026
CVE-2025-36431 CVE record

CVSS 5.4 Medium

XSS Security Vulnerability in response header affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2026
CVE-2025-36298 CVE record

CVSS 5.4 Medium

Security Vulnerability in Ebics server affects IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 30 Jul 2026
CVE-2026-1918 CVE record

CVSS 4.9 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway store sensitive information in a log file
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 28 Jul 2026
CVE-2026-3157 CVE record

CVSS 4.3 Medium

Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure in mailbox UI
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-615
Not analysed yet 28 Jul 2026
CVE-2026-3158 CVE record

CVSS 4.3 Medium

Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway due to information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-615
Not analysed yet 28 Jul 2026
CVE-2026-7362 CVE record

CVSS 4.3 Medium

Improper Access Control Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Broken access control
Not analysed yet 28 Jul 2026
CVE-2026-7769 CVE record

CVSS 8.1 High

SQL injection Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- SQL injection
Not analysed yet 28 Jul 2026
CVE-2026-7775 CVE record

CVSS 5.5 Medium

Cross-site Scripting Security Vulnerability in IBM Sterling B2B Integrator and IBM Sterling File Gateway
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 28 Jul 2026
CVE-2026-3482 CVE record

CVSS 5.3 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Broken access control
Not analysed yet 22 Jul 2026
CVE-2026-7253 CVE record

CVSS 6.0 Medium

IBM Sterling File Gateway SQL Injection
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- SQL injection
Not analysed yet 22 Jun 2026
CVE-2026-1264 CVE record

CVSS 7.1 High

IBM Sterling B2B Integrator and IBM Sterling File Gateway Improper Access Controls
- IBM Sterling B2B Integrator
- Authentication bypass
Not analysed yet 17 Mar 2026
CVE-2025-14031 CVE record

CVSS 7.5 High

IBM Sterling B2B Integrator and IBM Sterling File Gateway Denial of Service
- IBM Sterling B2B Integrator
- Command injection
Not analysed yet 17 Mar 2026
CVE-2025-36368 CVE record

CVSS 6.5 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway SQL Injection
- IBM Sterling B2B Integrator
- SQL injection
Not analysed yet 13 Mar 2026
CVE-2023-40693 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2026
CVE-2025-14483 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway Information Disclosure
- IBM Sterling B2B Integrator
- Information disclosure
Not analysed yet 13 Mar 2026
CVE-2025-14504 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2026
CVE-2026-0835 CVE record

CVSS 5.4 Medium

Cross-site scripting in IBM Sterling B2B Integrator
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 13 Mar 2026
CVE-2025-36348 CVE record

CVSS 4.9 Medium

The Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway is Vulnerable to Information Disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 17 Feb 2026
CVE-2025-36134 CVE record

CVSS 3.7 Low

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-1275
Not analysed yet 25 Nov 2025
CVE-2025-36112 CVE record

CVSS 5.3 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 24 Nov 2025
CVE-2025-36135 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Cross-Site Scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2025
CVE-2025-36002 CVE record

CVSS 5.5 Medium

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-256
- CWE-260
Not analysed yet 16 Oct 2025
CVE-2025-2667 CVE record

CVSS 2.7 Low

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 4 Sept 2025
CVE-2025-2694 CVE record

CVSS 4.8 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 4 Sept 2025
CVE-2025-2988 CVE record

CVSS 2.7 Low

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Information disclosure
Not analysed yet 19 Aug 2025
CVE-2025-33008 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 19 Aug 2025
CVE-2025-33014 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway link injection
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- CWE-1022
Not analysed yet 18 Jul 2025
CVE-2025-2793 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2025-3630 CVE record

CVSS 6.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- IBM Sterling File Gateway
- Cross-site scripting (XSS)
Not analysed yet 8 Jul 2025
CVE-2025-1349 CVE record

CVSS 5.5 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 18 Jun 2025
CVE-2025-1348 CVE record

CVSS 4.0 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure
- IBM Sterling B2B Integrator
- CWE-525
Not analysed yet 18 Jun 2025
CVE-2024-54172 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site request forgery
- IBM Sterling B2B Integrator
- Cross-site request forgery (CSRF)
Not analysed yet 18 Jun 2025
CVE-2024-54183 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 18 Jun 2025
CVE-2024-47116 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 31 Jan 2025
CVE-2024-45089 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- Information disclosure
Not analysed yet 31 Jan 2025
CVE-2024-49807 CVE record

CVSS 6.4 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 31 Jan 2025
CVE-2024-40696 CVE record

CVSS 4.8 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 31 Jan 2025
CVE-2024-47103 CVE record

CVSS 4.8 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 31 Jan 2025
CVE-2023-38739 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator cross-site request forgery
- IBM Sterling B2B Integrator
- Cross-site request forgery (CSRF)
Not analysed yet 31 Jan 2025
CVE-2023-50316 CVE record

CVSS 6.3 Medium

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- SQL injection
Not analysed yet 28 Jan 2025
CVE-2024-27263 CVE record

CVSS 5.3 Medium

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- CWE-300
Not analysed yet 28 Jan 2025
CVE-2021-20553 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator Standard Edition cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 18 Dec 2024
CVE-2023-45186 CVE record

CVSS 4.8 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2024
CVE-2023-50307 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2024
CVE-2024-22357 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 12 Apr 2024
CVE-2023-42016 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- CWE-614
Not analysed yet 9 Feb 2024
CVE-2023-32341 CVE record

CVSS 6.5 Medium

IBM Sterling B2B Integrator denial of service
- IBM Sterling B2B Integrator
- Denial of service
Not analysed yet 9 Feb 2024
CVE-2022-35638 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator cross-site request forgery
- IBM Sterling B2B Integrator
- Cross-site request forgery (CSRF)
Not analysed yet 22 Nov 2023
CVE-2023-22876 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator information disclosure
- IBM Sterling B2B Integrator
- Information disclosure
Not analysed yet 15 Mar 2023
CVE-2022-34330 CVE record

CVSS 6.1 Medium

IBM Sterling B2B Integrator cross-site scripting
- IBM Sterling B2B Integrator
- Cross-site scripting (XSS)
Not analysed yet 4 Jan 2023
CVE-2021-39087 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5…
- IBM Sterling B2B Integrator
Not analysed yet 16 Aug 2022
CVE-2021-39085 CVE record

CVSS 6.3 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5…
- IBM Sterling B2B Integrator
Not analysed yet 16 Aug 2022
CVE-2021-39035 CVE record

CVSS 5.4 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5…
- IBM Sterling B2B Integrator
Not analysed yet 16 Aug 2022
CVE-2021-38954 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through…
- IBM Sterling B2B Integrator
Not analysed yet 30 Jun 2022
CVE-2022-22482 CVE record

CVSS 6.5 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through…
- IBM Sterling B2B Integrator
Not analysed yet 17 May 2022
CVE-2021-39033 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5 and 6.1.0.0 through…
- IBM Sterling B2B Integrator
Not analysed yet 19 Apr 2022
CVE-2020-4668 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5…
- IBM Sterling B2B Integrator
Not analysed yet 8 Apr 2022
CVE-2021-29700 CVE record

CVSS 4.3 Medium

IBM Sterling B2B Integrator: IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 could allow an…
- IBM Sterling B2B Integrator
Not analysed yet 7 Oct 2021
CVE-2021-20571 CVE record

CVSS 4.9 Medium

IBM Sterling B2B Integrator 5.2.0.0 through 6.1.1.0 is vulnerable to stored cross-site scripting.
- IBM Sterling B2B Integrator
Not analysed yet 7 Oct 2021